补丁日：2024年9月
发布于 2024年9月10日 · 19 条安全说明 · 来源：SAP 安全补丁日页面
计划日期：2024年9月10日（每月第二个星期二）
- 新发布
- 16
- 更新
- 3
- 严重
- 1
- 高
- 1
- 最高 CVSS
- 9.8
- 已被利用
- 0
本月摘要
共 19 条安全说明（新发布 16 条，更新 3 条），其中严重 1 条、高 1 条，最高 CVSS 9.8。
优先修补
排序依据：是否已知被利用（CISA KEV），其次是 SAP 优先级，再次是 CVSS 分数。仅供分诊参考，不能替代您自己的风险评估。
Missing Authentication check in SAP BusinessObjects Business Intelligence Platform
Information Disclosure Vulnerability in SAP Commerce Cloud
全部安全说明
SAP 简介中写明 16 条新安全说明和 3 条更新；SAP 表格共列出 19 行（两者可能不同，例如包含 GitHub 安全公告或补发条目）。
SAP 公告中的最高优先级在 2024 年 12 月及以前标为 “Hot News”，自 2024 年 10 月起标为 “Critical”；本站统一显示为“严重”。
显示 19 / 19
| 标题 | CVE | ||||
|---|---|---|---|---|---|
| 3479478 | Missing Authentication check in SAP BusinessObjects Business Intelligence Platform 更新 | SAP BusinessObjects BI Platform | 严重 | 9.8 | CVE-2024-41730 |
| 3459935 | Information Disclosure Vulnerability in SAP Commerce Cloud 更新 | SAP Commerce Cloud | 高 | 7.4 | CVE-2024-33003 |
| 3488341 | Missing Authorization check in SAP Production and Revenue Accounting (Tobin interface) 新发布 | SAP Production and Revenue Accounting | 中 | 6.5 | CVE-2024-45286 |
| 3495876 | Multiple vulnerabilities in SAP Replication Server (FOSS) 更新 | SAP Replication Server | 中 | 6.5 | CVE-2023-0215, CVE-2022-0778, CVE-2023-0286 |
| 3497347 | Cross-Site Scripting (XSS) in eProcurement on S/4HANA 新发布 | SAP S/4HANA eProcurement | 中 | 6.1 | CVE-2024-42378 |
| 3501359 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP(CRM Blueprint Application Builder Panel) 新发布 | SAP NetWeaver AS ABAP / ABAP Platform | 中 | 6.1 | CVE-2024-45279 |
| 3477359 | Information disclosure vulnerability in SAP NetWeaver AS for Java (Destination Service) 新发布 | SAP NetWeaver AS Java | 中 | 6.0 | CVE-2024-45283 |
| 3430336 | Information Disclosure vulnerability in SAP Commerce Cloud 新发布 | SAP Commerce Cloud | 中 | 5.9 | CVE-2013-3587 |
| 3425287 | DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform 新发布 | SAP BusinessObjects BI Platform | 中 | 5.8 | CVE-2024-45281 |
| 3488039 | Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform 新发布 | SAP NetWeaver AS ABAP / ABAP Platform | 中 | 5.4 | CVE-2024-42371, CVE-2024-44117, CVE-2024-45285, CVE-2024-42380, CVE-2024-44115, CVE-2024-44116 |
| 3505503 | Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver AS Java (Logon Application) 新发布 | SAP NetWeaver AS Java | 中 | 4.8 | CVE-2024-45280 |
| 3498221 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal 新发布 | SAP NetWeaver Enterprise Portal | 中 | 4.7 | CVE-2024-44120 |
| 3437585 | Information Disclosure in SAP S/4 HANA (Statutory Reports) 新发布 | SAP S/4HANA | 中 | 4.3 | CVE-2024-44121 |
| 3481588 | Information Disclosure vulnerability in the SAP NetWeaver BW (BEx Analyzer) 新发布 | SAP NetWeaver BW | 中 | 4.3 | CVE-2024-41729 |
| 3481992 | Information Disclosure vulnerability in the SAP Business Warehouse (BEx Analyzer) 新发布 | SAP Business Warehouse | 中 | 4.3 | CVE-2024-44113 |
| 3505293 | Missing Authorization check in SAP for Oil & Gas (Transportation and Distribution) 新发布 | SAP for Oil & Gas | 中 | 4.3 | CVE-2024-44112 |
| 2256627 | Missing authorization check in SAP Student Life Cycle Management (SLcM) 新发布 | SAP Student Life Cycle Management | 低 | 2.7 | CVE-2024-45284 |
| 3496410 | Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform 新发布 | SAP NetWeaver AS ABAP / ABAP Platform | 低 | 2.7 | CVE-2024-41728 |
| 3507252 | Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform 新发布 | SAP NetWeaver AS ABAP / ABAP Platform | 低 | 2.0 | CVE-2024-44114 |